Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft
File: xljr82IzPBhfPBI8Qr5En9KneTg.mft (raw, json)
Hash identifier: uYDgjPi30lo0w4zsaf+97mYueR1rg0h+ZOKmfIDSrUQ=
Subject key identifier: DC:7C:12:8D:64:FD:9A:14:F1:D4:06:E2:81:36:A6:67:05:18:02:0C
Authority key identifier: C6:58:EB:F3:62:33:3C:18:5F:3C:12:3C:42:BE:44:9F:D2:A7:79:38
Certificate issuer: /CN=c658ebf362333c185f3c123c42be449fd2a77938
Certificate serial: 019D273B3D50E9551F3FB137111A7F070674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xljr82IzPBhfPBI8Qr5En9KneTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft
Manifest number: 01AD
Signing time: Wed 25 Mar 2026 23:01:26 +0000
Manifest this update: Wed 25 Mar 2026 23:01:26 +0000
Manifest next update: Thu 26 Mar 2026 23:01:26 +0000
Files and hashes: 1: xljr82IzPBhfPBI8Qr5En9KneTg.crl (hash: xkMBQjLZtBD91w/wkbOR9fQpUrarpeKzIZ6u2LUv4iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xljr82IzPBhfPBI8Qr5En9KneTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:3d:50:e9:55:1f:3f:b1:37:11:1a:7f:07:06:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c658ebf362333c185f3c123c42be449fd2a77938
Validity
Not Before: Mar 25 23:01:26 2026 GMT
Not After : Mar 26 23:01:26 2026 GMT
Subject: CN=dc7c128d64fd9a14f1d406e28136a6670518020c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:6b:41:a2:fd:ac:09:04:14:1a:0a:a9:33:
8a:01:20:fe:52:80:34:6e:8b:cb:cb:2f:04:26:91:
64:fb:01:e3:47:d7:fa:3e:b8:84:9d:ad:6b:71:61:
5e:af:c4:ba:1a:5f:5e:94:ef:56:a1:3f:a9:c2:19:
07:0a:e1:dc:14:20:02:40:2e:9c:be:68:2b:09:ae:
ce:59:a7:0f:96:2e:4e:df:c3:e7:be:fe:84:44:82:
7c:a6:03:a6:48:38:a7:21:4f:82:f0:02:a7:0e:03:
24:f9:cd:98:82:52:67:60:ed:41:5f:f3:c3:de:77:
3a:8a:cb:db:ff:29:2f:2f:28:4b:fc:1d:9e:74:bc:
e4:bf:a8:5c:fb:59:69:c2:f5:58:ed:c4:05:2d:3d:
38:2f:a6:7b:d8:32:bd:7e:28:17:61:87:36:b1:ee:
33:47:9d:0f:c4:b7:db:1b:5c:3c:c4:02:e7:37:92:
6f:14:ec:36:e4:77:48:ae:59:0b:4e:87:05:f9:1f:
a7:1b:bc:95:a6:e5:d3:0f:2f:41:33:ce:a3:7f:a5:
85:92:96:25:96:d1:97:90:59:8a:b0:2f:77:b6:b2:
51:85:ef:79:ec:b0:f9:34:0a:d4:8f:69:6e:d6:04:
75:ec:81:01:b5:e2:e0:dd:53:c9:8b:69:bb:5b:67:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7C:12:8D:64:FD:9A:14:F1:D4:06:E2:81:36:A6:67:05:18:02:0C
X509v3 Authority Key Identifier:
keyid:C6:58:EB:F3:62:33:3C:18:5F:3C:12:3C:42:BE:44:9F:D2:A7:79:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xljr82IzPBhfPBI8Qr5En9KneTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4c:64:86:97:12:9b:11:47:a1:64:f7:0f:7b:c6:27:b6:86:
42:20:59:7a:79:7e:a7:7d:39:bf:e1:4a:87:9c:d2:76:76:b6:
bf:83:ed:b4:9f:67:f2:32:d2:d0:3b:00:c9:da:f1:1d:6b:64:
01:5b:73:27:be:26:6e:34:1f:3e:e2:4b:3a:22:14:43:c6:72:
6f:d4:7a:fd:65:49:25:cc:a3:9f:16:32:0f:ec:fc:bb:13:8d:
e3:26:4a:da:64:3a:36:64:44:43:60:81:fd:1b:f3:14:5f:fa:
9c:84:4e:95:3e:70:dd:70:5a:ce:42:2e:93:68:51:8c:4c:23:
a1:c0:8e:dc:0e:af:df:e1:ec:e8:0f:2f:09:52:5c:b6:e2:ee:
dc:6b:3e:fb:4d:9a:8d:59:05:00:64:0b:13:f5:9a:a2:0d:1a:
80:dd:69:b8:6a:30:8d:f6:bb:33:55:87:74:d5:3d:da:fb:73:
74:b2:9d:72:ce:cd:94:4d:3e:9a:98:27:78:64:b2:6b:c8:a5:
af:63:99:57:27:ab:fe:9c:05:c9:b0:c2:e0:bf:32:a7:06:3a:
6f:1c:89:06:48:52:c9:1f:bb:5b:c5:05:98:f0:42:1c:d1:99:
55:4c:01:e5:94:19:0a:37:31:82:cf:93:8b:33:64:c0:f6:a5:
24:ce:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:23 2026 by rpki-client